Egress node protection for broadcast, unknown unicast, or multicast traffic in evpn topologies

ABSTRACT

A first device may receive network traffic including a first label. The first label may be an inclusive multicast label associated with a second device. The second device may be a designated forwarder for an Ethernet segment. The first device may determine a second label based on receiving the network traffic including the first label. The second label may be used to route the network traffic to a customer edge device, via a third device, rather than the second device. The third device may be a non-designated forwarder for the Ethernet segment. The first device may provide the network traffic, including the second label, to the third device to permit the third device to provide, via the Ethernet segment, the network traffic to the customer edge device based on the second label when a failure occurs in association with the second device.

BACKGROUND

An Ethernet virtual private network (EVPN) may allow a group ofdispersed client sites (e.g., included in a virtual local area network(VLAN)) to be connected using a data link layer (e.g., layer 2) virtualbridge. An EVPN may include one or more customer edge devices (e.g.,routers, switches, etc.) connected to one or more provider edge devices(e.g., routers, switches, etc.).

SUMMARY

According to some possible implementations, a first device may includeone or more processors to determine a failure associated with a seconddevice. The second device may be a designated forwarder for an Ethernetsegment associated with an Ethernet virtual private network instance.The one or more processors may receive network traffic including a firstlabel. The first label may be an inclusive multicast label associatedwith the second device. The network traffic may be broadcast, unknownunicast, or multicast traffic associated with the Ethernet virtualprivate network instance. The one or more processors may determine asecond label based on the first label and based on determining thefailure associated with the second device. The second label may be usedto route the network traffic to a customer edge device, via a thirddevice rather than the second device, in an event of the failureassociated with the second device. The one or more processors mayprovide the network traffic, including the second label, to the thirddevice to permit the third device to provide, via the Ethernet segment,the network traffic to the customer edge device based on the secondlabel.

According to some possible implementations, a non-transitorycomputer-readable medium may store one or more instructions that, whenexecuted by one or more processors of a first device, cause the one ormore processors to receive network traffic including a first label. Thefirst label may be an inclusive multicast label associated with a seconddevice. The second device may be a designated forwarder for an Ethernetsegment. The one or more instructions may cause the one or moreprocessors to determine a second label based on receiving the networktraffic including the first label. The second label may be used to routethe network traffic to a customer edge device, via a third device,rather than the second device. The third device may be a non-designatedforwarder for the Ethernet segment. The one or more instructions maycause the one or more processors to provide the network traffic,including the second label, to the third device to permit the thirddevice to provide, via the Ethernet segment, the network traffic to thecustomer edge device based on the second label when a failure occurs inassociation with the second device.

According to some possible implementations, a method may includedetermining, by a first device, a failure associated with a seconddevice. The second device may be a designated forwarder for an Ethernetsegment associated with an Ethernet virtual private network instance.The method may include receiving, by the first device, network trafficincluding a first label. The first label may be an inclusive multicastlabel associated with the second device. The method may includedetermining, by the first device, a second label based on receiving thenetwork traffic including the first label and based on determining thefailure associated with the second device. The method may includeproviding, by the first device, to a third device, and without providingto the second device, the network traffic including the second label topermit the third device to provide, via the Ethernet segment, thenetwork traffic to a customer edge device based on the second label. Thecustomer edge device may be associated with the Ethernet virtual privatenetwork instance.

BRIEF DESCRIPTION OF THE DRAWINGS

FIGS. 1A-1C are diagrams of an overview of an example implementationdescribed herein;

FIG. 2 is a diagram of an example environment in which systems and/ormethods, described herein, may be implemented;

FIG. 3 is a diagram of example components of one or more devices of FIG.2;

FIG. 4 is a flow chart of an example process for enabling egress nodeprotection for broadcast, unknown unicast, or multicast traffic in EVPNtopologies; and

FIG. 5 is a diagram of an example message structure associated with aroute message.

DETAILED DESCRIPTION

The following detailed description of example implementations refers tothe accompanying drawings. The same reference numbers in differentdrawings may identify the same or similar elements.

A customer edge device may be multi-homed to two or more provider edgedevices via a set of links in order to send and/or receive networktraffic associated with a routing and forwarding instance of an EVPN(referred to as an EVI). The set of links (referred to as an Ethernetsegment) connecting the customer edge device to the two or more provideredge devices may be identified by an Ethernet segment identifier (ESI).In some cases, a particular provider edge device (e.g., a designatedforwarder (DF)) may be responsible for particular actions associatedwith the EVI, such as sending broadcast, unknown unicast, or multicast(BUM) traffic, associated with the EVI, to the customer edge device viathe Ethernet segment. Additionally, in some cases, non-DF provider edgedevices associated with the Ethernet segment may receive BUM traffic(e.g., from another provider edge device) and may drop the BUM traffic(e.g., may not provide the BUM traffic to the customer edge device).

If a provider edge device, that is the DF for an Ethernet segment (e.g.,identified by a particular ESI), is associated with a failure, thenother provider edge devices associated with the Ethernet segment mayperform a DF election process in order to elect a different provideredge device to perform the DF role (e.g., forward BUM traffic to thecustomer edge device). However, this process may be associated with aparticular amount of time. For example, one or more of the otherprovider edge devices may be required to detect the failure associatedwith the DF device (e.g., based on border gateway protocol (BGP) peeringsessions), and may be required to exchange information identifying thateach provider edge device is associated with the Ethernet segment.Additionally, the one or more other provider edge devices may berequired to wait until a threshold amount of time is satisfied to allowother provider edge devices to exchange information, and may be requiredto elect another DF device (e.g., using a DF election algorithm). Thus,the time required for electing another DF device may result in blackholing associated with BUM traffic for the EVI (e.g., BUM traffic,associated with the EVI, may be dropped by non-DF devices withoutinforming a source that the BUM traffic did not reach the intendeddestination).

Implementations described herein may enable a provider device (e.g., arouter) to determine a failure associated with a DF provider edgedevice, receive network traffic to provide to the DF provider edgedevice, and provide the network traffic including a node protectionlabel to another provider edge device. The other provider edge devicemay identify the node protection label, and may forward the networktraffic to the customer edge device associated with the Ethernetsegment. In this way, the provider device may reduce a quantity ofnetwork traffic that is dropped while the other provider edge deviceselect another DF device for the Ethernet segment.

FIGS. 1A-1C are diagrams of an overview of an example implementation 100described herein. As shown in FIG. 1A, and by reference number 110, aprovider device (e.g., a router) may determine a failure associated witha DF device (e.g., a provider edge router). For example, the providerdevice may determine a failure of a link between the provider device andthe DF device, may determine a failure of the DF device (e.g., a crash),or the like. The DF device may be the DF for an Ethernet segment (e.g.,identified by ESI 1), and may be responsible for forwarding networktraffic (e.g., BUM traffic), associated with an EVI, to the customeredge device. As shown by reference number 120, the provider device mayreceive network traffic including a first label (T1). The networktraffic may include BUM traffic provided by a provider edge device. Forexample, the provider edge device may receive the network traffic (e.g.,from a customer edge device associated with the EVI), may include amulticast label (e.g., an inclusive multicast (IM) label associated withthe DF device), may include a transport label (T1), and may provide thenetwork traffic to the provider device.

As shown in FIG. 1B, and by reference number 130, the provider devicemay determine a second label (IM1) based on receiving the networktraffic and determining the failure associated with the DF device. Forexample, the provider device may determine an IM label (IM1) associatedwith the network traffic (e.g., an IM label that was advertised by theDF device, and included in the network traffic by the provider edgedevice). As shown, the provider device may store route information in afirst data structure, such as a routing table, that includes a transportlabel (T1), an operation (e.g., “POP”), and an action (e.g., an actionthat causes the provider device to perform a lookup in a second datastructure). As shown by reference number 140, the provider device maydetermine a third label (NP1) based on determining the second label(IM1). For example, the provider device may perform a lookup in thesecond data structure, and may identify a node protection label (NP1)that is mapped to the IM label (IM1). Additionally, the provider devicemay identify an operation (e.g., “SWAP”), and an action (e.g., forwardto protector device), based on information stored in the second datastructure.

As shown in FIG. 1C, and by reference number 150, the provider devicemay provide the network traffic, including the third label (NP1), to aprotector device (e.g., a provider edge device). As shown by referencenumber 160, the protector device may receive the network traffic, mayidentify the third label (NP1), and may provide the network traffic to acustomer edge device. For example, the protector device may identify thethird label (NP1), and may identify an Ethernet segment (e.g., ESI 1)and/or an EVI associated with the third label (NP1). In this way, theprotector device may forward the network traffic to the customer edgedevice via the Ethernet segment in the event of a failure associatedwith the designated forwarder device. Implementations described hereinmay enable the provider device to forward network traffic to theprotector device based on detecting a failure associated with the DFdevice. In this way, implementations described herein may reduce aquantity of network traffic that is lost based on a failure associatedwith a DF device, which conserves network traffic by reducing a numberof retransmissions of failed network traffic.

As indicated above, FIGS. 1A-1C are provided merely as an example. Otherexamples are possible and may differ from what was described with regardto FIGS. 1A-1C.

FIG. 2 is a diagram of an example environment 200 in which systemsand/or methods, described herein, may be implemented. As shown in FIG.2, environment 200 may include a provider device 210, a designatedforwarder device (DF) device 220, a protector device 230, one or morecustomer edge devices 240-1 through 240-N(N≥1) (hereinafter referred tocollectively as “customer edge devices 240,” and individually as“customer edge device 240”), a provider edge device 250, one or morevirtual local area networks (VLANs) 260-1 through 260-M (M≥1)(hereinafter referred to collectively as “VLANs 260,” and individuallyas “VLAN 260”), an Ethernet Virtual Private Network (EVPN) 270, and anetwork 280. Devices of environment 200 may interconnect via wiredconnections, wireless connections, or a combination of wired andwireless connections.

Provider device 210 includes one or more network devices (e.g., one ormore traffic transfer devices) capable of processing and transferringnetwork traffic (e.g., packets). For example, provider device 210 mayinclude a router, a gateway, a switch, a firewall, a hub, a bridge, areverse proxy, a server (e.g., a proxy server, a server executing avirtual machine, etc.), a security device, an intrusion detectiondevice, a load balancer, a line card (e.g., in a chassis-based system),or a similar type of device.

As used herein, a packet may refer to a communication structure forcommunicating information, such as a protocol data unit (PDU), a networkpacket, a frame, a datagram, a segment, a message, a block, a cell, aframe, a subframe, a slot, a symbol, a portion of any of the above,and/or another type of formatted or unformatted unit of data capable ofbeing transmitted via a network.

DF 220 includes one or more network devices (e.g., one or more traffictransfer devices) capable of processing and transferring networktraffic. For example, DF 220 may include a router, a gateway, a switch,a firewall, a hub, a bridge, a reverse proxy, a server (e.g., a proxyserver, a server executing a virtual machine, etc.), a security device,an intrusion detection device, a load balancer, a line card (e.g., in achassis-based system), or a similar type of device. In someimplementations, DF 220 is a provider edge device associated with EVPN270 and assigned a role of a designated forwarder associated with anEVI.

In some implementations, DF 220, protector device 230, and/or provideredge device 250 may be located on an edge of a core network of a serviceprovider (e.g., an Internet service provider), and may provide access tothe core network. For example, DF 220, protector device 230, and/orprovider edge device 250 may provide access, to the core network, tocustomer edge device 240 associated with a LAN of a customer (e.g., VLAN260). Additionally, or alternatively, DF 220, protector device 230,and/or provider edge device 250 may permit communications betweendifferent customer edge devices 240 (and/or VLANs 260).

Protector device 230 includes one or more network devices (e.g., one ormore traffic transfer devices) capable of processing and transferringnetwork traffic. For example, protector device 230 may include a router,a gateway, a switch, a firewall, a hub, a bridge, a reverse proxy, aserver (e.g., a proxy server, a server executing a virtual machine,etc.), a security device, an intrusion detection device, a loadbalancer, a line card (e.g., in a chassis-based system), or a similartype of device. In some implementations, protector device 230 is aprovider edge device, associated with EVPN 270, that can assume a roleof a designated forwarder associated with an EVI.

Customer edge device 240 includes one or more network devices (e.g., oneor more traffic transfer devices) capable of processing and transferringnetwork traffic. For example, customer edge device 240 may include arouter, a gateway, a switch, a firewall, a hub, a bridge, a reverseproxy, a server (e.g., a proxy server, a server executing a virtualmachine, etc.), a security device, an intrusion detection device, a loadbalancer, a line card (e.g., in a chassis-based system), or a similartype of device. In some implementations, customer edge device 240 may belocated on an edge of a customer premises, and may communicate with DF220, protector device 230, and/or provider edge device 250 to gainaccess to a service provider's core network. Additionally, oralternatively, customer edge device 240 may communicate with one or moreendpoint devices via a LAN (e.g., VLAN 260) to provide the endpointdevice(s) with access to the core network via DF 220, protector device230, and/or provider edge device 250.

Provider edge device 250 includes one or more network devices (e.g., oneor more traffic transfer devices) capable of processing and transferringnetwork traffic. For example, provider edge device 250 may include arouter, a gateway, a switch, a firewall, a hub, a bridge, a reverseproxy, a server (e.g., a proxy server, a server executing a virtualmachine, etc.), a security device, an intrusion detection device, a loadbalancer, a line card (e.g., in a chassis-based system), or a similartype of device. In some implementations, provider edge device 250 is aprovider edge device associated with EVPN 270.

VLAN 260 includes one or more wired and/or wireless networks. In someimplementations, VLAN 260 may include a virtual local area network. Insome implementations, VLAN 260 may include another type of LAN. In someimplementations, endpoint devices associated with a customer premisesmay communicate with one another internally via VLAN 260. Additionally,or alternatively, the endpoint devices may communicate with externaldevices (e.g., not included in VLAN 260) via customer edge device 240,DF 220, protector device 230, and/or provider edge device 250. Whileshown as being included in separate VLANs 260, customer edge devices 240may be included in a single VLAN 260, in some implementations.

EVPN 270 includes a Layer 2 Virtual Private Network (VPN) that allowsdevices included in VLAN 260 to communicate with other devices includedin VLAN 260. In some implementations, EVPN 270 may be provisioned by aservice provider to provide point-to-multipoint (e.g., broadcast,unknown unicast, and/or multicast) network traffic between endpointdevices (e.g., via DF 220, protector device 230, provider edge device250 and/or customer edge devices 240).

Network 280 includes a network associated with routing and/or forwardingtraffic provided via EVPN 270. For example, network 280 may amulti-protocol label switching (MPLS) based network, an internetprotocol (IP) based network, and/or another type of network throughwhich traffic, associated with VLAN 260 and/or EVPN 270 may travel.

The number and arrangement of devices and networks shown in FIG. 2 areprovided as an example. In practice, there may be additional devicesand/or networks, fewer devices and/or networks, different devices and/ornetworks, or differently arranged devices and/or networks than thoseshown in FIG. 2. Furthermore, two or more devices shown in FIG. 2 may beimplemented within a single device, or a single device shown in FIG. 2may be implemented as multiple, distributed devices. Additionally, oralternatively, a set of devices (e.g., one or more devices) ofenvironment 200 may perform one or more functions described as beingperformed by another set of devices of environment 200.

FIG. 3 is a diagram of example components of a device 300. Device 300may correspond to provider device 210, DF 220, protector device 230,customer edge device 240, and/or provider edge device 250. In someimplementations, provider device 210, DF 220, protector device 230,customer edge device 240, and/or provider edge device 250 may includeone or more devices 300 and/or one or more components of device 300. Asshown in FIG. 3, device 300 may include one or more input components305-1 through 305-B (B≥1) (hereinafter referred to collectively as inputcomponents 305, and individually as input component 305), a switchingcomponent 310, one or more output components 315-1 through 315-C(C≥1)(hereinafter referred to collectively as output components 315, andindividually as output component 315), and a controller 320.

Input component 305 may be points of attachment for physical links andmay be points of entry for incoming traffic, such as packets. Inputcomponent 305 may process incoming traffic, such as by performing datalink layer encapsulation or decapsulation. In some implementations,input component 305 may send and/or receive packets. In someimplementations, input component 305 may include an input line card thatincludes one or more packet processing components (e.g., in the form ofintegrated circuits), such as one or more interface cards (IFCs), packetforwarding components, line card controller components, input ports,processors, memories, and/or input queues. In some implementations,device 300 may include one or more input components 305.

Switching component 310 may interconnect input components 305 withoutput components 315. In some implementations, switching component 310may be implemented via one or more crossbars, via busses, and/or withshared memories. The shared memories may act as temporary buffers tostore packets from input components 305 before the packets areeventually scheduled for delivery to output components 315. In someimplementations, switching component 310 may enable input components305, output components 315, and/or controller 320 to communicate.

Output component 315 may store packets and may schedule packets fortransmission on output physical links. Output component 315 may supportdata link layer encapsulation or decapsulation, and/or a variety ofhigher-level protocols. In some implementations, output component 315may send packets and/or receive packets. In some implementations, outputcomponent 315 may include an output line card that includes one or morepacket processing components (e.g., in the form of integrated circuits),such as one or more IFCs, packet forwarding components, line cardcontroller components, output ports, processors, memories, and/or outputqueues. In some implementations, device 300 may include one or moreoutput components 315. In some implementations, input component 305 andoutput component 315 may be implemented by the same set of components(e.g., and input/output component may be a combination of inputcomponent 305 and output component 315).

Controller 320 is implemented in hardware, firmware, or a combination ofhardware and software. Controller 320 includes a processor in the formof, for example, a central processing unit (CPU), a graphics processingunit (GPU), an accelerated processing unit (APU), a microprocessor, amicrocontroller, a field-programmable gate array (FPGA), anapplication-specific integrated circuit (ASIC), and/or another type ofprocessor that can interpret and/or execute instructions. In someimplementations, controller 320 may include one or more processors thatcan be programmed to perform a function.

In some implementations, controller 320 may include a random accessmemory (RAM), a read only memory (ROM), and/or another type of dynamicor static storage device (e.g., a flash memory, a magnetic memory, anoptical memory, etc.) that stores information and/or instructions foruse by controller 320.

In some implementations, controller 320 may communicate with otherdevices, networks, and/or systems connected to device 300 to exchangeinformation regarding network topology. Controller 320 may createrouting tables based on the network topology information, createforwarding tables based on the routing tables, and forward theforwarding tables to input components 305 and/or output components 315.Input components 305 and/or output components 315 may use the forwardingtables to perform route lookups for incoming and/or outgoing packets.

Controller 320 may perform one or more processes described herein.Controller 320 may perform these processes in response to executingsoftware instructions stored by a non-transitory computer-readablemedium. A computer-readable medium is defined herein as a non-transitorymemory device. A memory device includes memory space within a singlephysical storage device or memory space spread across multiple physicalstorage devices.

Software instructions may be read into a memory and/or storage componentassociated with controller 320 from another computer-readable medium orfrom another device via a communication interface. When executed,software instructions stored in a memory and/or storage componentassociated with controller 320 may cause controller 320 to perform oneor more processes described herein. Additionally, or alternatively,hardwired circuitry may be used in place of or in combination withsoftware instructions to perform one or more processes described herein.Thus, implementations described herein are not limited to any specificcombination of hardware circuitry and software.

The number and arrangement of components shown in FIG. 3 are provided asan example. In practice, device 300 may include additional components,fewer components, different components, or differently arrangedcomponents than those shown in FIG. 3. Additionally, or alternatively, aset of components (e.g., one or more components) of device 300 mayperform one or more functions described as being performed by anotherset of components of device 300.

FIG. 4 is a flow chart of an example process 400 for enabling egressnode protection for broadcast, unknown unicast, or multicast traffic inEVPN topologies. In some implementations, one or more process blocks ofFIG. 4 may be performed by provider device 210 and/or protector device230. In some implementations, one or more process blocks of FIG. 4 maybe performed by another device or a group of devices separate from orincluding provider device 210 and/or protector device 230, such as DF220, customer edge device 240, and/or provider edge device 250.

As shown in FIG. 4, process 400 may include determining a failureassociated with a designated forwarder device (block 410). For example,provider device 210 may determine a failure associated with DF 220. Insome implementations, a failure may include a provider device 210 to DF220 link failure, a DF 220 to customer edge device 240 link failure, afailure of DF 220, MPLS-reachability failure associated with DF 220, orthe like. In some implementations, provider device 210 may establish apeering session (e.g., a BGP peering session) with DF 220, and maydetermine the failure associated with DF 220 based on a state of thepeering session (e.g., based on receiving a notification message from DF220, based on detecting inactivity associated with DF 220, or the like).

In some implementations, provider device 210 may be a penultimate hop inan MPLS network. For example, DF 220 may represent an egress router, andprovider device 210 may represent the penultimate hop. In someimplementations, provider device 210 may receive network traffic (e.g.,from provider edge device 250), and may forward the network traffic toDF 220. Additionally, provider device 210 may receive network trafficincluding a particular label (e.g., a transport label), and may forwardthe traffic to DF 220 based on the label, as described elsewhere herein.

In some implementations, customer edge device 240 may be multi-homed toDF 220 and protector device 230 via a set of links (e.g., an Ethernetsegment) in order to send and/or receive network traffic associated witha routing and forwarding instance of EVPN 270 (e.g., EVI). The Ethernetsegment connecting customer edge device 240 to DF 220 and protectordevice 230 may be identified by an Ethernet segment identifier (ESI). Insome implementations, a VLAN 260 identifier (e.g., an Ethernet tag) maybe configured on the Ethernet segment. Additionally, DF 220 may beresponsible for particular actions associated with the EVI, such assending network traffic (e.g., BUM traffic), associated with VLAN 260,to customer edge device 240. For example, assume that DF 220 andprotector device 230 are configured (e.g., by an administrator, anoperator, or a customer) such that DF 220 is the DF for the Ethernetsegment and/or that DF 220 and protector device 230 perform a DFelection (e.g., using a DF election algorithm, or the like), and that DF220 is the designated forwarder for network traffic associated with VLAN260.

In some implementations, the Ethernet segment may operate in“all-active” redundancy mode. For example, in such cases, DF 220 andprotector device 230 may be allowed to forward traffic to and/or fromthe Ethernet segment. In some cases, protector device 230 may receivenetwork traffic, associated with VLAN 260, from provider edge device 250and may drop the network traffic (e.g., because protector device 230 isnot the DF for the Ethernet segment).

In some implementations, particular devices of EVPN 270 (e.g., providerdevice 210, DF 220, protector device 230, and/or provider edge device250) may exchange route information, such as network layer reachabilityinformation (NLRI), based on BGP sessions (e.g., via BGP messages). Forexample, provider device 210, DF 220, protector device 230, and/orprovider edge device 250 may exchange EVPN 270 NLRI, such as Ethernetauto-discovery routes (e.g., route type 1), media access control(MAC)/Internet Protocol (IP) advertisement routes (e.g., route type 2),inclusive multicast Ethernet tag routes (e.g., route type 3), Ethernetsegment routes (e.g., route type 4), or the like.

In some implementations, DF 220, protector device 230, and/or provideredge device 250 may advertise one or more labels (e.g., MPLS labels, orthe like). For example, DF 220, protector device 230, and/or provideredge device 250 may distribute Inclusive Multicast (IM) labels viainclusive multicast Ethernet tag routes (e.g., route type 3). In thisway, provider edge device 250 may receive network traffic (e.g., BUMtraffic) via customer edge device 240, and may provide the networktraffic to DF 220 and/or protector device 230 including a particular IMlabel (e.g., corresponding to DF 220 or protector device 230respectively) and/or another label (e.g., a transport label).

In some implementations, DF 220 and/or protector device 230 mayadvertise Ethernet segment routes (e.g., route type 4), and may discoverthat DF 220 and protector device 230 are both connected to the Ethernetsegment associated with customer edge device 240. Additionally,protector device 230 may determine that DF 220 is associated with afailure (e.g., based on receiving information identifying the failure,based on failing to receive information from DF 220, or the like). Insome implementations, protector device 230 may perform a DF electionprocess associated with the Ethernet segment based on determining thatDF 220 is associated with a failure. For example, assume that otherprovider edge devices 250 are associated with the Ethernet segment. Insuch cases, protector device 230 and/or other provider edge devices 250associated with the Ethernet segment may perform a DF election processto elect a DF associated with the Ethernet segment (e.g., based on a DFelection algorithm, or the like).

However, a particular amount of time may be associated with discoveringthat DF 220 is associated with a failure and/or performing the electionprocess. For example, protector device 230 and other provider edgedevices 250 may be required to wait a threshold amount of time, exchangedevice information (e.g., IP addresses), perform the DF electionprocess, or the like. In such cases, the particular amount of time mayresult in black holing associated with network traffic for the EVI.During this particular amount of time, protector device 230 may assumethe role of a designated forwarder, as described below.

As further shown in FIG. 4, process 400 may include receiving networktraffic including a first label (block 420). For example, providerdevice 210 may receive network traffic, associated with VLAN 260,including a transport label associated with DF 220. In someimplementations, provider device 210 may store route information in adata structure, such as a routing table, a forwarding table, a flowtable, or a virtual routing and forwarding (VRF) table. For example,provider device 210 may store route information such as a next hopindicator that indicates an address (e.g., an IP address, MAC address,or the like) of DF 220, an interface identifier that identifies aninterface via which network traffic is to be sent to reach DF 220, ametric associated with routing the network traffic, a label associatedwith the network traffic, an operation associated with the networktraffic (e.g., a “POP” operation), or the like.

In some implementations, the first label may include a transport label.Additionally, provider device 210 may identify the first label, and maydetermine that the network traffic is to be sent to DF 220 (e.g., basedon performing a lookup). In some implementations, provider device 210may perform an operation associated with the network traffic (e.g., mayperform a “POP” operation and remove the first label), and may performanother lookup in another data structure based on identifying the firstlabel (e.g., because DF 220 is associated with the failure), asdescribed below.

As further shown in FIG. 4, process 400 may include determining a secondlabel based on receiving the network traffic and determining the failureassociated with the designated forwarder device (block 430). Forexample, provider device 210 may determine an IM label based onreceiving the network traffic and determining that DF 220 is associatedwith a failure. In some implementations, provider device 210 may store,in a data structure, route information (e.g., a next hop) associatedwith the transport label that may cause provider device 210 to perform alookup in another data structure (e.g., a data structure that stores IMlabels) in the event of a failure associated with DF 220.

In some implementations, provider device 210 may receive routeinformation (e.g., advertised route types 1, 2, 3, and/or 4), and maystore particular route information (e.g., route type 3 information, suchas IM labels) in a data structure. For example, provider device 210 mayoperate in a passive mode, and may store route information associatedwith network traffic (e.g., may store IM labels advertised by DF 220,protector device 230 and/or provider edge device 250). In this way,provider device 210 may conserve processor and/or memory resources basedon storing a subset of advertised route information associated with EVPN270. In some implementations, provider device 210 may identify the IMlabel included in the network traffic (e.g., included in a packet), andmay forward the network traffic to protector device 230, as describedelsewhere herein.

As further shown in FIG. 4, process 400 may include determining a thirdlabel based on determining the second label (block 440). For example,provider device 210 may determine a node protection label based ondetermining the IM label. In some implementations, a node protectionlabel includes a label that enables protector device 230 to identifythat network traffic, including the node protection label, is associatedwith an Ethernet segment for which DF 220 is the DF, as describedelsewhere herein.

In some implementations, DF 220, protector device 230, and/or provideredge device 250 may advertise route information including nodeprotection labels (e.g., as an extended community attribute).Additionally, provider device 210 may store the node protection labelsin a data structure. In some implementations, provider device 210 maydetermine (e.g., based on configuration information, receivedinformation, or the like) that protector device 230 is to providenetwork traffic to one or more Ethernet segments, for which DF 220 isthe DF, in the event of a failure associated with DF 220. Additionally,provider device 210 may store, in a data structure, a node protectionlabel, associated with protector device 230, and may map the nodeprotection label to an IM label associated with DF 220.

In some implementations, provider device 210 may perform a lookup basedon receiving network traffic, including the transport label, in theevent of a failure associated with DF 220. For example, provider device210 may determine an IM label associated with the network traffic, andmay determine a node protection label associated with the IM label. Inthis way, provider device 210 may provide the network traffic, includingthe node protection label, to protector device 230, as described below.

As further shown in FIG. 4, process 400 may include providing thenetwork traffic, including the third label, to a protector device (block450). For example, provider device 210 may provide the network traffic,including the node protection label, to protector device 230. In someimplementations, provider device 210 may store information thatidentifies an operation associated with the IM label (e.g., a swapoperation), a next hop indicator that indicates an address of protectordevice 230, an interface identifier that identifies an interface viawhich network traffic is to be sent to reach protector device 230, apath via which network traffic is to be sent to reach protector device230 (e.g., that identifies an MPLS tunnel), or the like. In someimplementations, provider device 210 may perform an operation (e.g., a“swap” operation) associated with the network traffic, remove the IMlabel, and push the node protection label onto a packet. In this way,protector device 230 may receive the network traffic, including the nodeprotection label, and may forward the network traffic to customer edgedevice 240, as described elsewhere herein.

As further shown in FIG. 4, process 400 may include receiving thenetwork traffic including the third label (block 460), identifying thethird label (block 470), and providing the network traffic to a customeredge device (block 480). For example, protector device 230 may receive,from provider device 210, the network traffic including the nodeprotection label, may identify the node protection label, and mayprovide the network traffic to customer edge device 240.

In some implementations, protector device 230 may receive informationthat identifies an Ethernet segment, associated with VLAN 260, for whichDF 220 is a designated forwarder. For example, protector device 230 maybe configured with (e.g., by an operator, or the like) and/or receive(e.g., from DF 220) route information that identifies an ESI, an EVI,and/or a VLAN 260 (e.g., based on an Ethernet Tag), for which DF 220 isa designated forwarder. Additionally, protector device 230 may store theroute information in a data structure, and may map the route informationto a node protection label. In this way, protector device 230 mayreceive network traffic, that includes the node protection label, mayremove the node protection label, and may forward the network traffic tocustomer edge device 240 (e.g., associated with the Ethernet segment forwhich DF 220 is the designated forwarder). In this way, protector device230 may forward network traffic to customer edge device 240 whileprotector device 230 and/or other provider edge devices 250 perform adesignated forwarder election process associated with the Ethernetsegment for which DF 220 is the designated forwarder, thereby reducing aquantity of lost network traffic.

Implementations described herein may reduce a quantity of networktraffic that is dropped based on a failure associated with DF 220. Forexample, implementations described herein enable provider device 210 todetermine a failure associated with DF 220, and provide network trafficto another provider edge device (e.g., protector device 230) such thatprotector device 230 may provide the network traffic to customer edgedevice 240 (e.g., despite not being the designated forwarder for aparticular Ethernet segment and/or EVI).

Although FIG. 4 shows example blocks of process 400, in someimplementations, process 400 may include additional blocks, fewerblocks, different blocks, or differently arranged blocks than thosedepicted in FIG. 4. Additionally, or alternatively, two or more of theblocks of process 400 may be performed in parallel.

FIG. 5 is an example of a format 500 for a route message. For example,the route message shown in FIG. 5 may represent an inclusive multicastEthernet tag route (e.g., route type 3). As shown in FIG. 5, the routemessage may include a field associated with a BUM node protection label.For example, the field associated with the BUM node protection label maybe used to advertise a node protection label.

Although FIG. 5 shows an example of a format for a route message, insome implementations, a route message may include additional fields,fewer fields, different fields, or differently arranged fields thanthose depicted in FIG. 5.

The foregoing disclosure provides illustration and description, but isnot intended to be exhaustive or to limit the implementations to theprecise form disclosed. Modifications and variations are possible inlight of the above disclosure or may be acquired from practice of theimplementations.

As used herein, the term component is intended to be broadly construedas hardware, firmware, and/or a combination of hardware and software.

Some implementations are described herein in connection with thresholds.As used herein, satisfying a threshold may refer to a value beinggreater than the threshold, more than the threshold, higher than thethreshold, greater than or equal to the threshold, less than thethreshold, fewer than the threshold, lower than the threshold, less thanor equal to the threshold, equal to the threshold, etc.

It will be apparent that systems and/or methods, described herein, maybe implemented in different forms of hardware, firmware, or acombination of hardware and software. The actual specialized controlhardware or software code used to implement these systems and/or methodsis not limiting of the implementations. Thus, the operation and behaviorof the systems and/or methods were described herein without reference tospecific software code—it being understood that software and hardwarecan be designed to implement the systems and/or methods based on thedescription herein.

Even though particular combinations of features are recited in theclaims and/or disclosed in the specification, these combinations are notintended to limit the disclosure of possible implementations. In fact,many of these features may be combined in ways not specifically recitedin the claims and/or disclosed in the specification. Although eachdependent claim listed below may directly depend on only one claim, thedisclosure of possible implementations includes each dependent claim incombination with every other claim in the claim set.

No element, act, or instruction used herein should be construed ascritical or essential unless explicitly described as such. Also, as usedherein, the articles “a” and “an” are intended to include one or moreitems, and may be used interchangeably with “one or more.” Furthermore,as used herein, the term “set” is intended to include one or more items(e.g., related items, unrelated items, a combination of related andunrelated items, etc.), and may be used interchangeably with “one ormore.” Where only one item is intended, the term “one” or similarlanguage is used. Also, as used herein, the terms “has,” “have,”“having,” or the like are intended to be open-ended terms. Further, thephrase “based on” is intended to mean “based, at least in part, on”unless explicitly stated otherwise.

1-20. (canceled)
 21. A first device, comprising: one or more memories;and one or more processors to: establish a peering session with a seconddevice; determine a failure associated with the second device, thesecond device being a designated forwarder for an Ethernet segmentassociated with an Ethernet virtual private network instance; receivenetwork traffic including a first label, the first label being amulticast label associated with the second device, the network trafficbeing broadcast, unknown unicast, or multicast traffic associated withthe Ethernet virtual private network instance; determine a second labelbased on the first label and based on determining the failure associatedwith the second device, the second label being used to route the networktraffic to a customer edge device, via a third device rather than thesecond device, in an event of the failure associated with the seconddevice; and provide the network traffic, including the second label, tothe third device to permit the third device to provide, via the Ethernetsegment, the network traffic to the customer edge device based on thesecond label.
 22. The first device of claim 21, where the one or moreprocessors, when determining the failure associated with the seconddevice, are to: determine the failure after establishing the peeringsession with the second device.
 23. The first device of claim 21, wherethe one or more processors are further to: determine a third labelassociated with the network traffic, the third label being a transportlabel associated with the second device; and where the one or moreprocessors, when determining the second label, are to: determine thesecond label based on the third label associated with the networktraffic.
 24. The first device of claim 21, where the one or moreprocessors are further to: receive information, from the second device,that identifies the second label; and store the information thatidentifies the second label based on receiving the information thatidentifies the second label; and where the one or more processors, whenproviding the network traffic to the third device, are to: provide thenetwork traffic to the third device based on the information thatidentifies the second label.
 25. The first device of claim 21, where theone or more processors are further to: store information that identifiesthe first label and an operation associated with the first label, theoperation being associated with removing the first label from thenetwork traffic and including the second label with the network traffic;and where the one or more processors, when providing the network trafficto the third device, are to: provide the network traffic to the thirddevice based on the information that identifies the first label and theoperation associated with the first label.
 26. The first device of claim21, where the one or more processors are further to: determine a thirdlabel associated with the network traffic, the third label being atransport label that identifies the second device; and perform a lookupusing a data structure based on the third label; and where the one ormore processors, when determining the second label, are to: determinethe second label based on performing the lookup using the datastructure.
 27. The first device of claim 21, where the failureassociated with the second device is at least one of: a failure of afirst link between the first device and the second device; a failure ofthe second device; or a failure of a second link between the seconddevice and the customer edge device.
 28. A non-transitorycomputer-readable medium storing instructions, the instructionscomprising: one or more instructions that, when executed by one or moreprocessors of a first device, cause the one or more processors to:establish a peering session with a second device; receive networktraffic including a first label, the first label being an inclusivemulticast label associated with the second device, the second devicebeing a designated forwarder for an Ethernet segment; determine a secondlabel based on receiving the network traffic including the first label,the second label being used to route the network traffic to a customeredge device, via a third device, rather than the second device, thethird device being a non-designated forwarder for the Ethernet segment;and provide the network traffic, including the second label, to thethird device to permit the third device to provide, via the Ethernetsegment, the network traffic to the customer edge device based on thesecond label when a failure occurs in association with the seconddevice.
 29. The non-transitory computer-readable medium of claim 28,where the one or more instructions, that cause the one or moreprocessors to determine the second label, cause the one or moreprocessors to: determine the second label based on the peering session.30. The non-transitory computer-readable medium of claim 28, where theone or more instructions, when executed by the one or more processors,further cause the one or more processors to: determine a third labelassociated with the network traffic, the third label being a transportlabel that identifies the second device; and perform a lookup using adata structure based on the third label; and where the one or moreinstructions, that cause the one or more processors to determine thesecond label, cause the one or more processors to: determine the secondlabel based on performing the lookup using the data structure.
 31. Thenon-transitory computer-readable medium of claim 28, where the one ormore instructions, when executed by the one or more processors, furthercause the one or more processors to: store route information associatedthe second device; and where the one or more instructions, that causethe one or more processors to determine the second label, cause the oneor more processors to: determine the second label based on the routeinformation.
 32. The non-transitory computer-readable medium of claim28, where the first device is a penultimate hop associated with anEthernet virtual private network instance.
 33. The non-transitorycomputer-readable medium of claim 28, where the failure associated withthe second device is at least one of: a failure of a first link betweenthe first device and the second device; a failure of the second device;or a failure of a second link between the second device and the customeredge device.
 34. The non-transitory computer-readable medium of claim28, where the one or more instructions, when executed by the one or moreprocessors, further cause the one or more processors to: storeinformation that identifies the first label and an operation associatedwith the first label, the operation being associated with removing thefirst label from the network traffic and including the second label withthe network traffic; and where the one or more instructions, that causethe one or more processors to provide the network traffic to the thirddevice, cause the one or more processors to: provide the network trafficto the third device based on the information that identifies the firstlabel and the operation associated with the first label.
 35. A method,comprising: establishing, between a first device and a second device, apeering session; determining, by the first device, a failure associatedwith the second device, the second device being a designated forwarderfor an Ethernet segment associated with an Ethernet virtual privatenetwork instance; receiving, by the first device, network trafficincluding a first label, the first label being an inclusive multicastlabel associated with the second device; determining, by the firstdevice, a second label based on receiving the network traffic includingthe first label and based on determining the failure associated with thesecond device; and providing, by the first device, to a third device,and without providing to the second device, the network trafficincluding the second label to permit the third device to provide, viathe Ethernet segment, the network traffic to a customer edge devicebased on the second label, the customer edge device being associatedwith the Ethernet virtual private network instance.
 36. The method ofclaim 35, where determining the second label comprises: determining thesecond label based on the peering session.
 37. The method of claim 35,further comprising: determining a third label associated with thenetwork traffic, the third label indicating that the network traffic isto be forwarded to the second device; and where determining the secondlabel comprises: determining the second label based on the third labelassociated with the network traffic.
 38. The method of claim 35, wherethe failure associated with the second device is at least one of: afailure of a first link between the first device and the second device;a failure of the second device; or a failure of a second link betweenthe second device and the customer edge device.
 39. The method of claim35, further comprising: storing route information associated the seconddevice; and where determining the second label comprises: determiningthe second label based on the route information.
 40. The method of claim35, further comprising: storing information that identifies the firstlabel and an operation associated with the first label, the operationbeing associated with removing the first label from the network trafficand including the second label with the network traffic; and whereproviding the network traffic to the third device comprises: providingthe network traffic to the third device based on the information thatidentifies the first label and the operation associated with the firstlabel.